@de./sdk 1.0.5 → 2.0.0

package/dist/allend/Access.d.ts

@@ -0,0 +1,51 @@
+import type { AccessOptions, UserSession } from '../types/access';
+import type { HTTPRequestOptions } from '../types';
+/**
+ * Which service the client addresses.
+ *
+ * De. is more than one server: de.arch answers the API, de.auth the ASI, and
+ * de.workspace the control plane. They are separate hosts, so the client has
+ * to say which one it means rather than assume the API.
+ */
+type AccessType = 'API' | 'ASI' | 'WSP';
+export default class AccessManager {
+    private atype;
+    private version;
+    private platform;
+    private baseURL;
+    /**
+     * The client's own `wid:TYPE:xcode`, base64-encoded.
+     *
+     * Not a transport header: de.arch resolves the workspace from the access
+     * token, and its header contract has no context field. It is kept because a
+     * client is scoped to one context for its lifetime, and a caller holding
+     * several — a proxy serving many workspaces — needs to ask which is which.
+     * `scope` decodes it.
+     */
+    readonly context: string;
+    protected accessToken?: string;
+    protected remoteOrigin?: string;
+    protected session?: UserSession;
+    private timeout?;
+    constructor(options: AccessOptions, atype: AccessType);
+    request<Response>({ url, timeout, ...options }: HTTPRequestOptions): Promise<Response>;
+    /**
+     * The context decoded into its parts.
+     *
+     * Every consumer was decoding the base64 and splitting on ':' by hand,
+     * including validating that it produced three fields. Returns undefined
+     * rather than throwing when the string is not a context, since a caller
+     * asking is usually checking.
+     */
+    get scope(): {
+        wid: string;
+        type: string;
+        xcode: string;
+    } | undefined;
+    setToken(token: string): void;
+    /** Attach or replace the signed-in user after construction. */
+    setSession(session: UserSession): void;
+    /** Drop the user session — e.g. on sign-out. */
+    clearSession(): void;
+}
+export {};

package/dist/allend/Access.js

@@ -0,0 +1,197 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const baseUrl_1 = require("../baseUrl");
+const error_1 = __importDefault(require("../error"));
+const USER_ACCOUNT_SERVICE = 'De.API';
+/**
+ * Resolve a fetch implementation for the host runtime.
+ *
+ * Node 18+, every browser and React Native all expose a global `fetch`, so that
+ * is the first and usual answer. `node-fetch` remains only as a fallback for
+ * Node versions predating the global.
+ *
+ * The previous check tested `globalThis.window && globalThis.fetch`, which was
+ * wrong for React Native: there is no `window` there but `fetch` is global, so
+ * it fell through to importing node-fetch and broke. Testing for `fetch`
+ * directly is what lets one Access layer serve node, browser and native.
+ */
+async function resolveFetch() {
+    if (typeof (globalThis === null || globalThis === void 0 ? void 0 : globalThis.fetch) === 'function')
+        return globalThis.fetch;
+    return (await Promise.resolve().then(() => __importStar(require('node-fetch')))).default;
+}
+class AccessManager {
+    constructor(options, atype) {
+        var _a;
+        if (!options)
+            throw new Error('Undefined Access Configuration');
+        if (!options.context)
+            throw new Error('Undefined Context Reference. Check https://doc.dedot.io/sdk/auth');
+        if (!options.accessToken)
+            throw new Error('Undefined Access Token. Check https://doc.dedot.io/sdk/auth');
+        this.context = options.context;
+        this.atype = atype;
+        this.version = options.version || 1;
+        this.platform = options.platform || 'proxy';
+        this.accessToken = options.accessToken;
+        this.remoteOrigin = options.remoteOrigin;
+        this.session = options.session;
+        this.timeout = options.timeout;
+        this.baseURL = ((_a = options.baseUrl) === null || _a === void 0 ? void 0 : _a.replace(/\/+$/, ''))
+            || (0, baseUrl_1.baseURL)(this.atype, options.env || 'dev', options.devHostname);
+    }
+    async request({ url, timeout, ...options }) {
+        const rawOptions = {
+            method: 'GET',
+            headers: {
+                /**
+                 * Default User agent for SDK request calls
+                 *
+                 * NOTE: Later replace by latest SDK version
+                 */
+                origin: this.remoteOrigin,
+                'de-user-agent': `De.${this.platform}/${this.version}.0`
+            }
+        };
+        if (this.atype === 'ASI')
+            rawOptions.headers['de-auth-service'] = USER_ACCOUNT_SERVICE;
+        if (this.accessToken)
+            rawOptions.headers.authorization = `Bearer ${this.accessToken}`;
+        /**
+         * User-session credentials, sent alongside the bearer token rather than
+         * instead of it. `isConnected` (AUX agent routes) reads only this pair;
+         * `isAuthorized` reads only the bearer. Routes guarded by either one are
+         * then reachable from a single client.
+         */
+        if (this.session) {
+            rawOptions.headers['de-auth-token'] = this.session.token;
+            rawOptions.headers['de-auth-device'] = this.session.device;
+        }
+        if (options.body) {
+            rawOptions.headers['content-type'] = 'application/json';
+            if (typeof options.body === 'object')
+                options.body = JSON.stringify(options.body);
+        }
+        if (typeof options.headers == 'object')
+            options.headers = {
+                ...options.headers,
+                ...rawOptions.headers
+            };
+        options = { ...rawOptions, ...options };
+        /**
+         * Bound the request when a deadline is configured.
+         *
+         * `AbortSignal.timeout` is not in the pre-18 Node the node-fetch fallback
+         * exists for, so this is guarded rather than assumed. A missing signal
+         * leaves the previous unbounded behaviour, which is the right degradation:
+         * the request still goes out.
+         */
+        const deadline = timeout !== null && timeout !== void 0 ? timeout : this.timeout;
+        if (deadline && typeof (AbortSignal === null || AbortSignal === void 0 ? void 0 : AbortSignal.timeout) === 'function')
+            options.signal = AbortSignal.timeout(deadline);
+        url = `${this.baseURL}/v${this.version}/${url.replace(/^\//, '')}`;
+        const fetch = await resolveFetch(), response = await fetch(url, options);
+        /**
+         * Everything De. answers is the `{ error, message, data }` envelope, so a
+         * body that will not parse did not come from De. — a gateway 502 page, a
+         * proxy timeout, an empty 204. Reporting that as a JSON syntax error hides
+         * the only two facts worth having, which are the status and the URL.
+         */
+        let body;
+        try {
+            body = await response.json();
+        }
+        catch {
+            /**
+             * Not De. answering — a gateway's HTML 502, a proxy timeout, an empty
+             * 204. There is no envelope to hand back, so this is the one case that
+             * raises, carrying the status and URL rather than a JSON syntax error.
+             */
+            throw new error_1.default(`${options.method} ${url} — ${response.statusText || 'no JSON body'}`, response.status);
+        }
+        /**
+         * A refusal is returned, not raised.
+         *
+         * De.'s answer is the `{ error, status, message, data }` envelope whether
+         * it succeeded or not, and `status` names the refusal precisely —
+         * SENDER_CAP_REACHED, CONSOLIDATION::NOT_IN_PROGRESS. Throwing that away
+         * and reconstructing it from an exception message is what callers were
+         * reduced to; handing back the envelope lets them read it.
+         *
+         * A non-2xx carrying an envelope is still De. answering, so it comes back
+         * the same way.
+         *
+         * What is NOT De. answering is raised. A wrong path gets Fastify's own
+         * 404 body, which is JSON but not the envelope — `error` there is the
+         * string 'Not Found', not a boolean. Returning that as though it were a
+         * refusal is how a client addressing a route that does not exist would
+         * look like a workspace being told no, which is precisely the bug that
+         * hid `/LSP/invitation/agent` behind a plausible-looking failure.
+         */
+        if (typeof (body === null || body === void 0 ? void 0 : body.error) !== 'boolean')
+            throw new error_1.default((body === null || body === void 0 ? void 0 : body.message) || `${options.method} ${url} — ${response.status} ${response.statusText || 'not a De. response'}`, response.status, body);
+        return body;
+    }
+    /**
+     * The context decoded into its parts.
+     *
+     * Every consumer was decoding the base64 and splitting on ':' by hand,
+     * including validating that it produced three fields. Returns undefined
+     * rather than throwing when the string is not a context, since a caller
+     * asking is usually checking.
+     */
+    get scope() {
+        try {
+            const decoded = typeof atob === 'function'
+                ? atob(this.context)
+                : Buffer.from(this.context, 'base64').toString('utf8'), [wid, type, xcode] = decoded.split(':');
+            return wid && type && xcode ? { wid, type, xcode } : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    setToken(token) { this.accessToken = token; }
+    /** Attach or replace the signed-in user after construction. */
+    setSession(session) { this.session = session; }
+    /** Drop the user session — e.g. on sign-out. */
+    clearSession() { this.session = undefined; }
+}
+exports.default = AccessManager;
+//# sourceMappingURL=Access.js.map

package/dist/allend/Access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Access.js","sourceRoot":"","sources":["../../src/allend/Access.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,wCAAoC;AACpC,qDAA+B;AAW/B,MAAM,oBAAoB,GAAG,QAAQ,CAAA;AAErC;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,YAAY;IACzB,IAAI,OAAO,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,KAAK,CAAA,KAAK,UAAU;QACzC,OAAO,UAAU,CAAC,KAAK,CAAA;IAEzB,OAAO,CAAE,wDAAa,YAAY,GAAC,CAAE,CAAC,OAAc,CAAA;AACtD,CAAC;AAED,MAAqB,aAAa;IAoBhC,YAAa,OAAsB,EAAE,KAAiB;;QACpD,IAAI,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QAChE,IAAI,CAAC,OAAO,CAAC,OAAO;YAAG,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;QAC1G,IAAI,CAAC,OAAO,CAAC,WAAW;YAAG,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;QAEzG,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAA;QAC3C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;QACtC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAA;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;QAC9B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;QAC9B,IAAI,CAAC,OAAO,GAAG,CAAA,MAAA,OAAO,CAAC,OAAO,0CAAE,OAAO,CAAE,MAAM,EAAE,EAAE,CAAE;eAClC,IAAA,iBAAO,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK,EAAE,OAAO,CAAC,WAAW,CAAE,CAAA;IACrF,CAAC;IAED,KAAK,CAAC,OAAO,CAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,OAAO,EAAsB;QACtE,MAAM,UAAU,GAAQ;YACtB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP;;;;mBAIG;gBACH,MAAM,EAAE,IAAI,CAAC,YAAY;gBACzB,eAAe,EAAE,MAAM,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,IAAI;aACzD;SACF,CAAA;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;YACtB,UAAU,CAAC,OAAO,CAAC,iBAAiB,CAAC,GAAG,oBAAoB,CAAA;QAE9D,IAAI,IAAI,CAAC,WAAW;YAClB,UAAU,CAAC,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,WAAW,EAAE,CAAA;QAEjE;;;;;WAKG;QACH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAA;YACxD,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAA;QAC5D,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;YACvD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAClC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAE,OAAO,CAAC,IAAI,CAAE,CAAA;QACjD,CAAC;QAED,IAAI,OAAO,OAAO,CAAC,OAAO,IAAI,QAAQ;YACpC,OAAO,CAAC,OAAO,GAAG;gBAChB,GAAG,OAAO,CAAC,OAAO;gBAClB,GAAG,UAAU,CAAC,OAAO;aACtB,CAAA;QAEH,OAAO,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,EAAE,CAAA;QAEvC;;;;;;;WAOG;QACH,MAAM,QAAQ,GAAG,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,IAAI,CAAC,OAAO,CAAA;QACxC,IAAI,QAAQ,IAAI,OAAO,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,OAAO,CAAA,KAAK,UAAU;YACtD,OAAgB,CAAC,MAAM,GAAG,WAAW,CAAC,OAAO,CAAE,QAAQ,CAAE,CAAA;QAE7D,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAA;QAElE,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,EAC5B,QAAQ,GAAG,MAAM,KAAK,CAAE,GAAG,EAAE,OAAc,CAAE,CAAA;QAEnD;;;;;WAKG;QACH,IAAI,IAAS,CAAA;QACb,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QACpC,MAAM,CAAC;YACL;;;;eAIG;YACH,MAAM,IAAI,eAAQ,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,IAAI,cAAc,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAE,CAAA;QAC7G,CAAC;QAED;;;;;;;;;;;;;;;;;;WAkBG;QACH,IAAI,OAAO,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,CAAA,KAAK,SAAS;YAClC,MAAM,IAAI,eAAQ,CAChB,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,KAAI,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,IAAI,oBAAoB,EAAE,EAC/G,QAAQ,CAAC,MAAM,EACf,IAAI,CACL,CAAA;QAEH,OAAO,IAAgB,CAAA;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,KAAK;QACP,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,UAAU;gBACxB,CAAC,CAAC,IAAI,CAAE,IAAI,CAAC,OAAO,CAAE;gBACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EACpE,CAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAE/C,OAAO,GAAG,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAChE,CAAC;QACD,MAAM,CAAC;YAAC,OAAO,SAAS,CAAA;QAAC,CAAC;IAC5B,CAAC;IAED,QAAQ,CAAE,KAAa,IAAW,IAAI,CAAC,WAAW,GAAG,KAAK,CAAA,CAAC,CAAC;IAE5D,+DAA+D;IAC/D,UAAU,CAAE,OAAoB,IAAW,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA,CAAC,CAAC;IAEnE,gDAAgD;IAChD,YAAY,KAAW,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA,CAAC,CAAC;CAClD;AA5KD,gCA4KC"}

package/dist/allend/Agent/consolidation.d.ts

@@ -0,0 +1,16 @@
+import type { AgentConsolidationRespondValidation, AgentConsolidationHandoffValidation, AgentConsolidationCompleteValidation } from '@de./types';
+import { type Http } from '../../utils';
+export default class AgentConsolidation {
+    private http;
+    constructor(http: Http);
+    respond(body: AgentConsolidationRespondValidation['body']): Promise<AgentConsolidationRespondValidation['response']>;
+    handoffConfirm(body: AgentConsolidationHandoffValidation['body']): Promise<AgentConsolidationHandoffValidation['response']>;
+    /**
+     * The receiving rider reporting leg 2 delivered.
+     *
+     * No handoff code — the PIN authenticated the transfer between riders at
+     * confirm. This is what takes the offer out of IN_PROGRESS and returns the
+     * rider to their zone pool.
+     */
+    handoffComplete(body: AgentConsolidationCompleteValidation['body']): Promise<AgentConsolidationCompleteValidation['response']>;
+}

package/dist/allend/Agent/consolidation.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+// ─── Agent Consolidation ──────────────────────────────────────────────────────
+class AgentConsolidation {
+    constructor(http) {
+        this.http = http;
+    }
+    async respond(body) {
+        return await this.http.request({
+            url: '/agent/consolidation/respond',
+            method: 'POST',
+            body
+        });
+    }
+    async handoffConfirm(body) {
+        return await this.http.request({
+            url: '/agent/consolidation/handoff/confirm',
+            method: 'POST',
+            body
+        });
+    }
+    /**
+     * The receiving rider reporting leg 2 delivered.
+     *
+     * No handoff code — the PIN authenticated the transfer between riders at
+     * confirm. This is what takes the offer out of IN_PROGRESS and returns the
+     * rider to their zone pool.
+     */
+    async handoffComplete(body) {
+        return await this.http.request({
+            url: '/agent/consolidation/handoff/complete',
+            method: 'POST',
+            body
+        });
+    }
+}
+exports.default = AgentConsolidation;
+//# sourceMappingURL=consolidation.js.map

package/dist/allend/Agent/consolidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consolidation.js","sourceRoot":"","sources":["../../../src/allend/Agent/consolidation.ts"],"names":[],"mappings":";;AAOA,iFAAiF;AAEjF,MAAqB,kBAAkB;IACtC,YAAqB,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAEnC,KAAK,CAAC,OAAO,CAAE,IAAiD;QAC/D,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAkD;YAC/E,GAAG,EAAE,8BAA8B;YACnC,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAE,IAAiD;QACtE,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAkD;YAC/E,GAAG,EAAE,sCAAsC;YAC3C,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAE,IAAkD;QACxE,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAmD;YAChF,GAAG,EAAE,uCAAuC;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;CACD;AAjCD,qCAiCC"}

package/dist/allend/Agent/delivery.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("../../utils");
+// ─── Agent Delivery Orders ────────────────────────────────────────────────────
+class AgentDelivery {
+    constructor(http) {
+        this.http = http;
+    }
+    async list(querystring) {
+        return await this.http.request({
+            url: `/agent/delivery/orders${(0, utils_1.qs)(querystring)}`,
+            method: 'GET'
+        });
+    }
+    async get(reference) {
+        return await this.http.request({
+            url: `/agent/delivery/orders/${reference}`,
+            method: 'GET'
+        });
+    }
+    async accept(reference) {
+        return await this.http.request({
+            url: `/agent/delivery/orders/${reference}/accept`,
+            method: 'POST'
+        });
+    }
+    async updateStatus(reference, body) {
+        return await this.http.request({
+            url: `/agent/delivery/orders/${reference}/status`,
+            method: 'PATCH',
+            body
+        });
+    }
+    async reportIssue(reference, body) {
+        return await this.http.request({
+            url: `/agent/delivery/orders/${reference}/issue`,
+            method: 'POST',
+            body
+        });
+    }
+}
+exports.default = AgentDelivery;
+//# sourceMappingURL=delivery.js.map

package/dist/allend/Agent/delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.js","sourceRoot":"","sources":["../../../src/allend/Agent/delivery.ts"],"names":[],"mappings":";;AAOA,uCAAgE;AAEhE,iFAAiF;AAEjF,MAAqB,aAAa;IACjC,YAAqB,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAEnC,KAAK,CAAC,IAAI,CAAE,WAAwD;QACnE,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAA0C;YACvE,GAAG,EAAE,yBAAyB,IAAA,UAAE,EAAE,WAAW,CAAE,EAAE;YACjD,MAAM,EAAE,KAAK;SACb,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAE,SAAiB;QAC3B,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAyC;YACtE,GAAG,EAAE,0BAA0B,SAAS,EAAE;YAC1C,MAAM,EAAE,KAAK;SACb,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAE,SAAiB;QAC9B,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAA4C;YACzE,GAAG,EAAE,0BAA0B,SAAS,SAAS;YACjD,MAAM,EAAE,MAAM;SACd,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAE,SAAiB,EAAE,IAAiD;QACvF,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAkD;YAC/E,GAAG,EAAE,0BAA0B,SAAS,SAAS;YACjD,MAAM,EAAE,OAAO;YACf,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAE,SAAiB,EAAE,IAAgD;QACrF,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAiD;YAC9E,GAAG,EAAE,0BAA0B,SAAS,QAAQ;YAChD,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;CACD;AAvCD,gCAuCC"}

package/dist/allend/Agent/dispatch.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+// ─── Agent Dispatch ───────────────────────────────────────────────────────────
+class AgentDispatch {
+    constructor(http) {
+        this.http = http;
+    }
+    async respond(body) {
+        return await this.http.request({
+            url: '/agent/dispatch/respond',
+            method: 'POST',
+            body
+        });
+    }
+    async rate(body) {
+        return await this.http.request({
+            url: '/agent/dispatch/rate',
+            method: 'POST',
+            body
+        });
+    }
+}
+exports.default = AgentDispatch;
+//# sourceMappingURL=dispatch.js.map

package/dist/allend/Agent/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../../src/allend/Agent/dispatch.ts"],"names":[],"mappings":";;AAMA,iFAAiF;AAEjF,MAAqB,aAAa;IACjC,YAAqB,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAEnC,KAAK,CAAC,OAAO,CAAE,IAA4C;QAC1D,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAA6C;YAC1E,GAAG,EAAE,yBAAyB;YAC9B,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAE,IAAyC;QACpD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAA0C;YACvE,GAAG,EAAE,sBAAsB;YAC3B,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;CACD;AAlBD,gCAkBC"}

package/dist/{de.sdk/src/allend → allend}/Agent/index.d.ts

@@ -1,3 +1,4 @@
+import type { UserSession } from '../../types/access';
 import type { AgentInfoValidation, AgentAvailabilityValidation, AgentUpdateValidation } from '@de./types';
 import AccessManager from '../Access';
 import AgentRides from './rides';
@@ -8,12 +9,28 @@ import AgentConsolidation from './consolidation';
 import AgentReallocation from './reallocation';
 import AgentDispatch from './dispatch';
 import AgentOrigin from './origin';
+import AgentRealtime from './realtime';
 export type AgentConfig = {
     context: string;
     accessToken: string;
     env?: 'dev' | 'staging' | 'prod';
     platform?: 'web' | 'mobile' | 'server' | 'proxy';
     remoteOrigin?: string;
+    /** Per-request deadline in ms. See `AccessOptions.timeout`. */
+    timeout?: number;
+    /** Explicit service origin, overriding the env table. See `AccessOptions.baseUrl`. */
+    baseUrl?: string;
+    /** Host to substitute for `localhost` in `dev` (Eg. a native emulator) */
+    devHostname?: string;
+    /**
+     * The signed-in rider.
+     *
+     * Required in practice: AUX agent routes authenticate the caller with
+     * `isConnected` + `isAgent`, which read `de-auth-token` / `de-auth-device`
+     * and ignore the bearer token entirely. Without this, every call here
+     * fails authorization no matter how valid the access token is.
+     */
+    session?: UserSession;
 };
 export default class Agent extends AccessManager {
     readonly rides: AgentRides;
@@ -24,6 +41,7 @@ export default class Agent extends AccessManager {
     readonly reallocation: AgentReallocation;
     readonly dispatch: AgentDispatch;
     readonly origin: AgentOrigin;
+    readonly realtime: AgentRealtime;
     constructor(config: AgentConfig);
     info(): Promise<AgentInfoValidation['response']>;
     update(body: AgentUpdateValidation['body']): Promise<AgentUpdateValidation['response']>;

package/dist/allend/Agent/index.js

@@ -0,0 +1,74 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const Access_1 = __importDefault(require("../Access"));
+const rides_1 = __importDefault(require("./rides"));
+const delivery_1 = __importDefault(require("./delivery"));
+const shipping_1 = __importDefault(require("./shipping"));
+const navigation_1 = __importDefault(require("./navigation"));
+const consolidation_1 = __importDefault(require("./consolidation"));
+const reallocation_1 = __importDefault(require("./reallocation"));
+const dispatch_1 = __importDefault(require("./dispatch"));
+const origin_1 = __importDefault(require("./origin"));
+const realtime_1 = __importDefault(require("./realtime"));
+// ─────────────────────────────────────────────────────────────────────────────
+//
+// Agent: Agent Operation Interfaces — de.arch AUX/agent routes.
+// Covers profile, availability, orders (ride/delivery/shipping),
+// navigation, consolidation, reallocation, dispatch, and origin — plus the
+// realtime socket channel (order rooms + proactive-consolidation responses).
+//
+// ─────────────────────────────────────────────────────────────────────────────
+class Agent extends Access_1.default {
+    constructor(config) {
+        if (!config.context)
+            throw new Error('Undefined context. See https://doc.dedot.io/sdk/aux');
+        if (!config.accessToken)
+            throw new Error('Undefined accessToken. See https://doc.dedot.io/sdk/auth');
+        const access = {
+            context: config.context,
+            accessToken: config.accessToken,
+            env: config.env || 'dev',
+            platform: config.platform || 'proxy',
+            remoteOrigin: config.remoteOrigin,
+            timeout: config.timeout,
+            baseUrl: config.baseUrl,
+            devHostname: config.devHostname,
+            session: config.session
+        };
+        super(access, 'API');
+        this.rides = new rides_1.default(this);
+        this.delivery = new delivery_1.default(this);
+        this.shipping = new shipping_1.default(this);
+        this.navigation = new navigation_1.default(this);
+        this.consolidation = new consolidation_1.default(this);
+        this.reallocation = new reallocation_1.default(this);
+        this.dispatch = new dispatch_1.default(this);
+        this.origin = new origin_1.default(this);
+        this.realtime = new realtime_1.default(access);
+    }
+    // ── Agent profile ─────────────────────────────────────────────────────────
+    async info() {
+        return await this.request({
+            url: '/agent',
+            method: 'GET'
+        });
+    }
+    async update(body) {
+        return await this.request({
+            url: '/agent',
+            method: 'PATCH',
+            body
+        });
+    }
+    async availability(status) {
+        return await this.request({
+            url: `/agent/${status}`,
+            method: 'GET'
+        });
+    }
+}
+exports.default = Agent;
+//# sourceMappingURL=index.js.map

package/dist/allend/Agent/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/allend/Agent/index.ts"],"names":[],"mappings":";;;;;AAMA,uDAAqC;AAErC,oDAAgC;AAChC,0DAAsC;AACtC,0DAAsC;AACtC,8DAA0C;AAC1C,oEAAgD;AAChD,kEAA8C;AAC9C,0DAAsC;AACtC,sDAAkC;AAClC,0DAAsC;AAyBtC,gFAAgF;AAChF,EAAE;AACF,gEAAgE;AAChE,iEAAiE;AACjE,2EAA2E;AAC3E,6EAA6E;AAC7E,EAAE;AACF,gFAAgF;AAEhF,MAAqB,KAAM,SAAQ,gBAAa;IAW/C,YAAa,MAAmB;QAC/B,IAAI,CAAC,MAAM,CAAC,OAAO;YAAO,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QAChG,IAAI,CAAC,MAAM,CAAC,WAAW;YAAG,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;QAErG,MAAM,MAAM,GAAkB;YAC7B,OAAO,EAAO,MAAM,CAAC,OAAO;YAC5B,WAAW,EAAG,MAAM,CAAC,WAAW;YAChC,GAAG,EAAW,MAAM,CAAC,GAAG,IAAS,KAAK;YACtC,QAAQ,EAAM,MAAM,CAAC,QAAQ,IAAI,OAAO;YACxC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,OAAO,EAAO,MAAM,CAAC,OAAO;YAC5B,OAAO,EAAO,MAAM,CAAC,OAAO;YAC5B,WAAW,EAAG,MAAM,CAAC,WAAW;YAChC,OAAO,EAAO,MAAM,CAAC,OAAO;SAC5B,CAAA;QACD,KAAK,CAAE,MAAM,EAAE,KAAK,CAAE,CAAA;QAEtB,IAAI,CAAC,KAAK,GAAW,IAAI,eAAU,CAAE,IAAI,CAAE,CAAA;QAC3C,IAAI,CAAC,QAAQ,GAAQ,IAAI,kBAAa,CAAE,IAAI,CAAE,CAAA;QAC9C,IAAI,CAAC,QAAQ,GAAQ,IAAI,kBAAa,CAAE,IAAI,CAAE,CAAA;QAC9C,IAAI,CAAC,UAAU,GAAM,IAAI,oBAAe,CAAE,IAAI,CAAE,CAAA;QAChD,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAkB,CAAE,IAAI,CAAE,CAAA;QACnD,IAAI,CAAC,YAAY,GAAI,IAAI,sBAAiB,CAAE,IAAI,CAAE,CAAA;QAClD,IAAI,CAAC,QAAQ,GAAQ,IAAI,kBAAa,CAAE,IAAI,CAAE,CAAA;QAC9C,IAAI,CAAC,MAAM,GAAU,IAAI,gBAAW,CAAE,IAAI,CAAE,CAAA;QAC5C,IAAI,CAAC,QAAQ,GAAQ,IAAI,kBAAa,CAAE,MAAM,CAAE,CAAA;IACjD,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,IAAI;QACT,OAAO,MAAM,IAAI,CAAC,OAAO,CAAkC;YAC1D,GAAG,EAAE,QAAQ;YACb,MAAM,EAAE,KAAK;SACb,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAE,IAAmC;QAChD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAoC;YAC5D,GAAG,EAAE,QAAQ;YACb,MAAM,EAAE,OAAO;YACf,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAE,MAA6D;QAChF,OAAO,MAAM,IAAI,CAAC,OAAO,CAA0C;YAClE,GAAG,EAAE,UAAU,MAAM,EAAE;YACvB,MAAM,EAAE,KAAK;SACb,CAAC,CAAA;IACH,CAAC;CACD;AA9DD,wBA8DC"}

package/dist/allend/Agent/navigation.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("../../utils");
+// ─── Agent Navigation ─────────────────────────────────────────────────────────
+class AgentNavigation {
+    constructor(http) {
+        this.http = http;
+    }
+    async location(body) {
+        return await this.http.request({
+            url: '/agent/navigation/location',
+            method: 'POST',
+            body
+        });
+    }
+    async nearby(body, querystring) {
+        return await this.http.request({
+            url: `/agent/navigation/nearby${(0, utils_1.qs)(querystring)}`,
+            method: 'POST',
+            body
+        });
+    }
+}
+exports.default = AgentNavigation;
+//# sourceMappingURL=navigation.js.map

package/dist/allend/Agent/navigation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"navigation.js","sourceRoot":"","sources":["../../../src/allend/Agent/navigation.ts"],"names":[],"mappings":";;AAIA,uCAAgE;AAEhE,iFAAiF;AAEjF,MAAqB,eAAe;IACnC,YAAqB,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAEnC,KAAK,CAAC,QAAQ,CAAE,IAAqC;QACpD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAsC;YACnE,GAAG,EAAE,4BAA4B;YACjC,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAE,IAAmC,EAAE,WAAkD;QACpG,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAoC;YACjE,GAAG,EAAE,2BAA2B,IAAA,UAAE,EAAE,WAAW,CAAE,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;CACD;AAlBD,kCAkBC"}

package/dist/allend/Agent/origin.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+// ─── Agent Origin ─────────────────────────────────────────────────────────────
+class AgentOrigin {
+    constructor(http) {
+        this.http = http;
+    }
+    async statusReport(body) {
+        return await this.http.request({
+            url: '/agent/origin/status',
+            method: 'POST',
+            body
+        });
+    }
+    async registerPoi(body) {
+        return await this.http.request({
+            url: '/agent/origin/poi/register',
+            method: 'POST',
+            body
+        });
+    }
+    async addPoiNote(body) {
+        return await this.http.request({
+            url: '/agent/origin/poi/note',
+            method: 'POST',
+            body
+        });
+    }
+}
+exports.default = AgentOrigin;
+//# sourceMappingURL=origin.js.map

package/dist/allend/Agent/origin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"origin.js","sourceRoot":"","sources":["../../../src/allend/Agent/origin.ts"],"names":[],"mappings":";;AAOA,iFAAiF;AAEjF,MAAqB,WAAW;IAC/B,YAAqB,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAEnC,KAAK,CAAC,YAAY,CAAE,IAA+C;QAClE,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAgD;YAC7E,GAAG,EAAE,sBAAsB;YAC3B,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAE,IAAwC;QAC1D,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAyC;YACtE,GAAG,EAAE,4BAA4B;YACjC,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAE,IAAuC;QACxD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAwC;YACrE,GAAG,EAAE,wBAAwB;YAC7B,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;CACD;AA1BD,8BA0BC"}

package/dist/allend/Agent/reallocation.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+// ─── Agent Reallocation ───────────────────────────────────────────────────────
+class AgentReallocation {
+    constructor(http) {
+        this.http = http;
+    }
+    async respond(body) {
+        return await this.http.request({
+            url: '/agent/reallocation/respond',
+            method: 'POST',
+            body
+        });
+    }
+}
+exports.default = AgentReallocation;
+//# sourceMappingURL=reallocation.js.map

package/dist/allend/Agent/reallocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reallocation.js","sourceRoot":"","sources":["../../../src/allend/Agent/reallocation.ts"],"names":[],"mappings":";;AAGA,iFAAiF;AAEjF,MAAqB,iBAAiB;IACrC,YAAqB,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAEnC,KAAK,CAAC,OAAO,CAAE,IAAgD;QAC9D,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAiD;YAC9E,GAAG,EAAE,6BAA6B;YAClC,MAAM,EAAE,MAAM;YACd,IAAI;SACJ,CAAC,CAAA;IACH,CAAC;CACD;AAVD,oCAUC"}

package/dist/allend/Agent/realtime.d.ts

@@ -0,0 +1,36 @@
+import type { OrderTrackingEvent } from '@de./types';
+import type { RTLocation, Message, Peer } from '../../types';
+import type { AccessOptions } from '../../types/access';
+import AccessManager from '../Access';
+export type AgentRealtimeContext = {
+    wid: string;
+    type: string;
+    xcode: string;
+};
+export default class AgentRealtime extends AccessManager {
+    private nsp?;
+    private iosHost;
+    private agentId?;
+    constructor(access: AccessOptions);
+    connect(agentId: string): Promise<void>;
+    disconnect(): boolean;
+    /**
+     * Join an order tracking room with a Join Room Token issued by
+     * GET /v1/tracking/:reference (role must match this socket's utype)
+     */
+    join(jrtoken: string): Promise<boolean>;
+    sendLocation(location: RTLocation): this;
+    sendMessage(message: Message): this;
+    onOrderUpdate(fn: (event: OrderTrackingEvent) => void): this;
+    onMessage(fn: (message: Message) => void): this;
+    onConnected(fn: (peer: Peer) => void): this;
+    onDisconnected(fn: (peer: Peer) => void): this;
+    ackConsolidation(context: AgentRealtimeContext, offerId: string): this;
+    nackConsolidation(context: AgentRealtimeContext, offerId: string, nackReason?: string): this;
+    /**
+     * Stream the rider's position into the proactive consolidation engine —
+     * feeds trajectory tracking (ARRIVED / DIVERGING / STATIONARY) for
+     * committed handoffs. Distinct from order-room sendLocation().
+     */
+    positionUpdate(context: AgentRealtimeContext, location: RTLocation, status?: string): this;
+}